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Ac 

a^x- # * n^s»« war § ftSMaagp 

jO-rsaaBBBlB^-KtiO^T, tufE#;*7fre>tMBefc 30 

pa#aB**rrsc t%<&WLt?Z7 ! 
y * )vmm*> * *? ~> x -f A 0 

fkSlfc£fc*>#TfB1ft-&«^<k8ifBf|g|5£, 40 

mem i ©**{t«KW'r*at«iwnffl7 f — ***2© 
amesi 2 oflrefljMcttjs-rsft 2 ©«^<k&*fflv> 



ffireB«x—*te* 6** 1 
fcflS^bti»c»«-r.*tii^bii*fflv»T!i^ftr * 1 1 

fix- * £ £i±«-f 3 c i: lc J: 9 mm^-^^mvim 
^Bft^-^ tt5IBiii^mg|5t«fc5«S*Sffi£D7 s -^ 

[0 0 0 1] 
[0 0 0 2] 

jWkfciftfcf, 3tf-LTt^{kL^V\ il«@«g«rjl 

^SrflJfflq^i: LT«*«J:5 K"r«fcfttc(i, 
[0 0 0 3] C©f^£;btE^#;/^:&5l3iT3fcfe 



(3) 



iftfcW 1 1 -3 0 8 5 6 4 



^*465tc«-7?|S]ttB8^ffl^?.n§A\ CCD-}? 

[0 0 0 4] &&&>®CDj;mZ. 3H3«T, £?tti&<D 
-^'•^'I'v'iXh (Message Digest, t(T, MD) 

MDtt-»N-y^aBB»<oa<»]6nfcttK*67CO 

[0 0 0 5] ^lcaa*tl/-cMD*ffi^l«:fflV>TBg^ 
{fcb, CtVSr;* >>-fe— ^^lE? (Message Authenticatio 
n Code, J-XT, MAC) tU, * V V-f^f— 2 t 20 

[0 0 0 6] SflMHti, *';-^t;l-f-^Ma?nT 
V^TM A C£«^{kLTMD uCMDi: 

md' t^-scrs^H^^w^So t>u *ys**- 

;Vf-^^3f(ci-3t3!a^nfti:LTt, I3f 30 

AC*ffr£T?ff?\ MDtMD' fcfcm&Sffit&So 
CWci^T^ * y ^i-A^—iiim 3 «fc o T5fc& 

[0007] 

[588 tfUPft L * 5 fc -T 5 DU9] ±IB L/c<fc 5 tc, f* s> 

mm? z>££tf®mviz;<, LfttfoT, fJZivmm 

[0 0 0 8] B«©l§^fc:»i7 f --*©te*±* x 



[0 0 0 9] *«W»4COJ:5ftSBlt!:»SbT!a:*n 

[0010] 

[0 0 1 1] $fc, JB2©Bf3H\ *^5t«fc*)«a?** 

itmc *t jst zmmtmttm 1 ^xmfc&m&Kim -r- z 
[001 2] sfc, m,3<o3&mz. mmtmmm • ssi 

CWJSLT^««ftfe* 1 OWf^<taitc:*tiCr*» 1 CD 

m x. tdtkmm&-> * t . mi M^fui-y— > ^ mm 
a^{bsifBiigi5 i: , mmw, 2 ow^f tatcwisf 2 
v—> ^ <owg& tut m E^a^aiffl v 1 - zzmmt 



(4) 



¥fffl¥ 1 1 -3 08 5 6 4 



[0 0 13] SS 4 ©JSHBtt, B«x-*©&&* 

&<m-tz>bt&ic. mm? 2 - z common* o^t^i 
nfcB«7*- * * 7 r > ^ea-r * 7 r -y u > if* 

£ SijfEH^x- * £ * Jt*T S C fc <fc 0 B^x- # © 

apt * o T^gB^sas^ss s nfc«*i»*iB«7*- * 

kHuEB»S*gPtc*5i!ffl*jSK<0'f r — fljfBBg 
[0 0 14] 20 
f^^SEUS*;*-? 1 0 OtHfcKtfcggg lOlt 

^e.«figsnSo f^;Hi*^7i o o©#;*^gis 

5 0- Hi, »#*?2i:, tiitig§3 

i:, A/D«Si»4i:, ffi^i&sa$ 5 
96 0*ttS. aUBUVXlfcrt-LTAttLfc*^*: 
•ttJMHR?2l<:J:DaM3ftS. C©aM»t*t)»6 

4 ■erS?*;lHi9fcaSil*nT«^ffl3B»5 -PBfjeoffll 

- £ liMK JC U TBfc^SB 7 ic ?tl5„ 
[0 0 15] 6lcfB1f?nTV>?)B^-r— 2 

li7 7"Ol/7*— -^-y h^SjSP8tc*3VTx JPEG, 
T I F F&£©<S0P©BI&7*- T-y Hc^glSttSo 
CftK.fc'K B^x-^tCN-y^lf^Ox-^AMtiJO^ 
nft7ri';V7*-v-? htffftKSnS (02© 
(A) ) o ^tcMD^g|3 9T'{i, B^x— ^ao&Wii 40 

(02© (B) ) o ^t, MACf^figgPl in£ 

i^ty. i otfcc^ufefaii^nfcawHiiKprtv™ 

(#*5) %ffl^TMD*«HSfb-r*{:tfcJ:*)MAC 
(120(C)), Jfcfc, ^-y^fB^g|5l 1 
T'ti, MUMA C *B«^<y ^if Kttlfl-r 5 031 2 
© (D) ) o 7T-r , J>^'WaSPl 3T«C©<t'5tcL 
TM5nft7r^'^7*-'7.y h©B«77-T;Kc^ 
rS7 7l';l/ga«:fT , 5o so 



[0 0 16] c©<k5ftH«7r-r;l/jWEit«W4:ftiJ»» 
l 5<DWV(cJ:>)%Mbi>nB4:eWiflci 7K*B«sn 
T^SStftlSHtc, fe5VHiii«»g|5l 4©iMiiHC 

frs^^jEp-rsfcfth:, ^a^si^Bi o ltfm^b 
[0017] -r&to-s, &&tk&mmi o 1 tcgasn 
att*iJ8s^ i 8 ©swamc <t t> 7 r -r u > ^ssas 1 9 c 

SB 2 4©*iJfflltC t tt>affi[Hli^2 5^LT7 7Y';>y 

gagBi 9Ahgen5. 7y-ru>^aaJi 9t- 

«, Ii7 7i';l'tfMACi:l«f-^ (c©B«x- 
^icti, B^-r"-^^©t>©©ffilC. JPEG^TIF 

AC««^ft»2 ncA*J2*U Itf-^ttMDM 
352 2fcA^«tl^c 

[0018] a#<tsP2 1 -ett&BHsi^y 2 0 t$.e> 

^CJ6IBH*tlTV>i.^aKp U biic (*p<5) ^rfflv^ 

Qi'iiK public (A* -5) tm&VfcWtimK 
pnv a te 0*7*^) it*, BS^fb/'«^t«raifc:43^T 
^Tt&Zm-e&Zo —73, MDf&KBB2 2T?t±A7J* 

nrcB^-x- * & %t s «j *s n. h ©m^mis* 

^TMD244itS, Mc, JflR— 8t8B2 3T?tiMD 

H«fc 7 r ^ JB 3 * K * 5 30B[ « tifc ipjffif * c 

[0 0 19] ±EbfcJBi**»«CJ:nwr, B^x- 

5 rt © W^<t«*ffl V^TStS^toffl X- * 
(MAC) #<t/£U C©3fS1^ftlfflT r -^«rB^7 7' 

[0 0 2 0] $fc, aaWAJOffl-r-^iffja-rSftib© 
W^fUItt, *^ ^*ijffl#**ii>n»t|ft«fe:iiai-r* 

f r -i5»«r^-rs/'c4i)©^ftatt, ^e»^C46*^5 

[0 0 2 1] ^te*5SW©IB2*«IJe*i:LTs ^&ffl© 
*-F (t;1/^— F) «r*-r«f f -7^yl/ffiaa*^^K 
O^TRBIt*. CCTHi, *^7tJ.XT©^a*-F 

mm 7 7 4 mc ikm^fa^- ztttts-tz 



(5) 
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B<£7 r >f ;l/*8fc S ft LWfcE««f*fc 

[0022] wf. a3**fabT*^fc»fflfcSiwr 

±>*7&5 0-2fr6*Sx^£;l/EJ»**9 1 0 2tc 

fci^r, «aj#h*- fb«?»3 i -e±isufc*ao^ 10 

[0 0 2 3]iA«, 7-v;l/^e- F#aiRLfcfc£K: 
tt* 6 Ote* LTf#6nfeB« 

x-*#B«**y 6lcE«£n* 0 CO^E— F"CfcMf 

[0 0 2 4] Sfc, «^*L^-F*a«L;fc»ftlC 
■•f-*tf77>f;V7*"V-; hSfttf8^g| 20 

^a** LfM» 3-0 fc * nr smb^t-- * icm? 

[0 0 2 5] SOB»Jh-t-F*W!bfc«*fc: 

[0 0 2 6] &fi8fcSrt- F*»?sn«:»^tc 

B (pc. eftffl^fi^M^H) *^®»?nt77^u 
3k:jjs6nfcB«7r>f7i/tejtr*aflio 

B«T-*«4MACfcB«7*-*fcfc#«;Sn. B^-r 
-91&7T'fV> vwmfc 6 M D f&ass 3 3 lc A * * 
tU MACtt«#<t»3 4fcA*«ft*o MDf&5£95 3 
3 TteXJl S n ftHfix- * 5 ; > y >- =l Hft % £ OHf 
SOB8*fflV^MD*4«t5o ^{bgP3 4 

l*4HIB**y 3 SfcEBSnTV^SiMMK 
public (rt*^) ^ffl^TMD' *4flctS 0 Jt«— S 40 
«.3 2ttMDfcMD' fc*J±KLT— a"TS*>5^*¥iJ 
Erf So W#W-aL*frofc«'&k:ttai«7 r -ir*^ 

[0 0 2 7] Sfc,. •fe*aT*-FttHMfcr p — **E1t 
Bfl*E«T*fc*fcfl!^6ft*o 77 
<fV>9VWttl 3*>e>iB«-r-*tfK*ffi*nTBg# 
ffc»3 6teA**ft*o WWffc«3 6licoiif-$ 
^JWrtM^ey 3 7tcEtt«nTV^S«Sa*fflV^TB8 

SPl 3lc&£ 0 cm Eft«tt«Uf98Bl 5<DfflWCcfc so 



0 cofl^bsnfcB«^-*^WL^«6aE««(* 

1 7fc»*i&$*lSo 

[0 0 2 8] ■fe+aT*— Fttiifflialift^LT 

Ritt, y>^«S8Bl 3^6B«*7 ? -*WBl*m 

$tlTBg^{tSP3 6tcA^^ni>o Bg-5§{tgf$3 6teCO 
B«fc-r-**«*«^*U 3 7tE*Sftt^*ftti 

1 4(0»J»tCcfc?)ii«IiIlSl 6*fl*l,T^ffl5»B (P 

[0 0 2 9] ±EbfcJB2«|«»teJ:n«f. W*tf, 
7ty^l»*l«lSlcli/-7W- FTKU II 
fi&BfiJ t & £ fe co^rjg^f 3 E&ffiig*!^- F , 

tc, «^©H^B«*flHBU ■•77^;V*^lc 

[0 0 3 0] JMTfc:B4*#BHLT*«WO»3|ISBJB 
H 1 oaASHEKCfH 3 F©*****LT 

0 3tc43v>x. Mm^me oic&-DTim»*mm-?% 
ctic&^rmb nrcmm'r-ztemm* ^ y 6 icien 
2ns 0 B«**y 6^e)iif-^^77-f;i/7t- 

^yh«**8»cK*|ilSnT, JPEG. TIFF^i 

5, B^-^^^^^lt^co^-^^Sn^n/c^z 
^;l/7t-*?7h^M^n§ (H50 (A) ) o 

[oo3i](pi^ i c*— fw«i»4 1 commie* 

D*^5«5 0-3te«ai*tiffcfliABKffl I C*-F 
4 0*^6BAttlEfflOt»«36l«M*fflSnT7r>r^7* 
-v*y hSE»«8fcA**nT, 'W^fcHBARKffl© 
i*BtfB5<D (B) tc^-r^^tcIB^^n^o <^CMD 

fftaa»9-e«\ -r-*^*, feu<ttB«-r-*atfffl 

ABEffl * te» L n <y > a if com^OMIS 

(C) ) o ^tc, MACf*«»l lT^is «W6B^^U 

5) «rffl^TMD*B»#{tr«Ci:teJ:0MAC*f^fi8 
T§ ffl5^ (D) ) o ^N^^IB^gPl 2m BfiS'N 
•y ^4^ B#-n ^y ^i«8 Of-M ffl ABEffl 7 s - * 

tcSp^T, MAc*«ttn 0 cntCcfcD. mmyy-f 

0 (E) tc^-rcfc"5aB«7*— ht*77 
-YU>4^«a»l 3tc«^^tlT7 7^;bBB|^nSo 



(6) 
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[0032] ctD***mm7 7 4>vimmmmmm 

[0033] -rate -6. ^a^ass i o 4 tc^a^n 
fc!e««K*i 7fci3««nTi/^*B«7r>r;i/tt, ten 

KftSUfiWi 8 0»JIPlci!)7r^U>'^raasi 9tc 

-Ol/tfMA C fcWIBbfcM A C^feS^tCigS^-r— 

n^MAC»<f-^fc feKMif 10 

tC s J P E G* T I F F^^IWWfttfci 

#fk«2 1 fcA*S*U MAC^*i6^^lC^g^f- 
*«4MDff«»2 2fcA**.*l*o S&tlAREfflf 

[0 0 3 4] «#ftSB2 1 Ttt4>ffla^^U 2 0&cfc£ 
frU»IS11SnTV^*4JBWIKp«Mie Ob*^) *Jflv^ 
TM A C*Wftt*«l tfc t DMD 1 *4«T*o - 
MDf^«SB2 2-ettA**nfcB«7*— 20 

3Wu, Jt«— aaB2 3TttMD 1 fcMD2fc*Jt«LT 
[0 0 3 5] Sfc, flA1MRIE»ULff4 2 a t*U:aAe 

[0 0 3 6] ±lELfc*3*ffi»ttfc:<fctttf. Hflfcx- 
T\ iBW^-^^llfcftlBSOfflABIIffl^-^oat 

a*»at-t5o aue«o«ABiEffl7 ? — ^tfaaisn 

So 

[0 0 3 7] WTfc*KW<DlB4iaii»!B*RWt-ao « 

atfH3<D*ai€:-K<D«ia*«iSLTi/^*ftv cne> 

5 0-4**^S-r r > ? *;l/IEaA^^^X-rA 1 0 5 lc 
hS^gP8tcR^tb^nr, JPEG, 



10 

•■r - * *\ y #mm<DT- $ WW® t£nrc7T^)Vy 

t-V7h^MSnS.(H7 0 (A) ) o SlCMDff 

^ ^aBia&if<Dm^OB8a«:ffll/^TMD 1 &SW*M 
D2 CMKD (B) . (B) * ) ^Mt§ 0 CCOMD 

1 tMD 2 ^ <DtOtSoTt)c):t\ MD1SM 
ACffoSBBl lteA**ti« 0 MACffjjan 1 ttiS 
ffii^^eu i 0k:*6fri:»iB11*tiT^*a««K 

private (^J^^) ^TM A C ^ItlLTM A C 1 
*fpja-r* <M7<D (C) ) o COMAC Hi'Ny^fB 

san 2tc^^ns 0 

[0 0 3 8] -7?. MD2C4I C*-F»J»ffi4 1*^> 
tt> **5»5 0-4fc^SftfcfflABEEfll I C# 
-K40' lcA*2ftS 0 fflABSEffll C*—F4 0' 

private (I C*-F) ^^TMD2^f{tLTM 
AC2^Mn (H70 (C) V) o £<DM A C 2 
I C*— KfflfMM 1 «r^LT^\^^IBggpi 2tc 

[0039] 'w&nm&i 2m BH^y^ic 

iB«-^y^flffliO"r— £lC*n*.T. MACl£MAC2 

(d) t^tJ;5^ii7t-v7 F*t?^T-ru>yw 
[0040] c(Dx^>r s mmyy^^mmmi^mm^ 

tc. as^asi i o 6^ffli^ns 0 
[0041] -r*t> -s, sjca^s^si 0 6tcga^n 

i 8 o^jmi^cfc D77-YU >rmm& 1 9 tc 

[o o4 2] 7T-ru>^sa8Pi 9t^> mmyr-r 

;WMAC1, MAC2i:i»f-^ (CKOHflR-r— £ 
■•■r— ^OfeEKDfl&lC, JPEG^TI FF 
^<0^^^-«««rd«)Tfe<kV>) fcfciHiStU MA 
C 1 tt«#fb«R2 1 - 1 fcAJjSn, i«f-*«MD 
m£SI3 2 2 - 1 tcA^J^tlSo «*t{kgfl2 1 - 1 
■■«»;2 0 f fc«63tni;«>l51»*nTi/>«^HBK 
public ^TMAC l^I§fbt§Cfct 

J:DMDl^Kt§o ^MttKpubiie (**^) 

ffiiK private (* * 5) H\ fl«{t/**{t«!HlC 

fc^T^7i:%§it65o -75F> MDf&SSI$2 2 - 1 
TttA^^nfciS^-^^&^Ny^aBBRa^OflfT^ 
OBftSffl^TMDr *£jK"T*o jrte?-^ 

2 3- 1 T^iMD 1 tMD T t*J±RLTMf^-a 

[0 0 4 3] fWj^tcLT, MAC 2«S»{kffl5 2 1 -2 
tcA^l^n, Mf-*liMDft«ail2 2-2tcA^3^ 



(7) 
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nso mmt& 21-2 x-a^mm^ * u 2 0 • t * 6 

A^C4i)K1i$nTV^^8tKpubiic (ICA-K) # 
fflVTMAC 2*^{k-r5Ci;lcJ:tlMD2«r±^-r 

§0 &BBK public (IC*-K) t^glK private 

(i ca-k) to.. mwt/Wittxamcis^r^T 

[0 0 4 4]— 7?* MDffr£SS2 2-2TtiA2l£ftfc 

MD 2 ' *£f£lT3o Jt«-»»2 3- 2T'BM 

D 2 £:MD 2* tttttML TM^tf—m. Lttk^lcliffit io 

[0 0 4 5] ±JBLfcSI4*jWBtifc«fc*Uf, Bi^T-*- 
!g2<9&S&»rB^-*£ffl^T^;i,<DT\ fg2<D?fcffi 
8fiA ^ 5 ->Xf AfclSBf 5 C £ t T?t 3<, 

[0 0 4 6] WTIC, *5g^con5^seimi^ittwr 

5o »5Btt»»ttW*.ff#-K, PCMC I AA-K 
[0 0 4 7] S£3fe, *Sf r -^t3tbTfflV>P>nTV>5 

nfc A if 9 fr«W(rT f? 5 «fc 5 £> fzUXD^m tLT 

a, * u s^jvi/BB^-^k £ <nx *> frmmtfmznrc 
[0048] *$m&mr<i*. ■< *—w->vtm^%. 

££T\ Hffs-r-^OffiSS, -g|5Offl«(0«0Jgc?, * 
■vr^aXDjlftQ^cftDjaa^rfiELfcB^ctt, flgLfc 

[0049] 08«b5*bjbb©^*— ^-y-— '^>;* 

Ti> l O7O«fS4^t0-i?$t), 0>Rlf0 l l lC7n-r 
AV3>1 07-lt, CC0/^V3> 10 7- 

nc^»Ri^pcMc i aa— Kfr6fc«>f*— s>-9- 

-Ml0 7-2t*^isS*tl5. so 
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[0 0 5 0] WTt*5||«UBJ8©f^ffl*H9 07 0- 

35 7 2 tt, IB«^i*SiJ®lg|5 7 10*J«lfc«feOISiS«(*7 
OA'S, 09© (A) tc^-T <fc-5a7*— h«D®# 
7 7^^Mti.o »*Vtt» n0P^B9 3 

7r-<^Mt5 (X^-y^S 1) „ 7r 

-r u >?wm 7 2 (cbbbbrtb^ -> v t^t-? 

;K SCSI, I r D ABOSBB? *BttT*3< C fc 
t-5o -f— MS©*<y hV-tmffiVffi? 

*mz.rcm-&-et>mm<DW}Mi}m en^o ^t, mac 

^fiESP 7 3 tt, 77-f I) 7 2 fr&BB? 7 -f 

;l/£r§tt&-=>TMA C l^ffi-TS (X-r-y7°S 2) . 

-r&*>-5, 7r-ru >^BS8B7 2(iit7ri';i/%M 
AC 1 fcHB-r-*£t;:#BU MACl«tt^t»7 
5tcA73ctn, BB^-*{iMDffrj£gB7 6KA73Sn 
So «^{kgP7 SttiWtU 7 4 teK«;S tlfc^H 
ilKpubiic (A*^) *fflV>TB#<fcLTMD 1 J&flFfjg 
-T-So £fc, MDf^«W7 6«^-y->nKIS(aif©m^ 
OHR4IWMD 1 ' %Mtl, HBMRW7 9B: 
MDltMDl' tl£kt®i-?2>C tlc^t), A*^7JJI 

SB&£ 7 7-Y'Jy 7 2 icg&o 
[00 5 1] as^nt^^v^icli, It7r^;l/ 

tlTISfflty-^ 8 0 9* lei; §B^* 
A^T^ni. Uf77S3) „ cco*^, i«7r^;v 
0^»Ifi^^e8 2fC^Stl, 3.-9*9 IttC 

8 4%fflV^T#«©8Hi©B#*fTT3fc»>, 'f*-* 
^rATj-r^o 8 3 {±3.— 9^9 1 fc-Tpt— : ^"9— ^ l 0 7 

8 1 .tt % 1 C A- KBB8B8 5 OW»K * ») BABBffl 
I CA-K 9 23^5fflABKfflOlf«*tt*mLT»* 

^H)?li7f77s sofiJBftfNOtas^-esitt* 

[0 0 5 2] MM'&<DMm7T'<>l£m%kmmcDT-* 
ltyr^fV>^m^7 2{c^e,n«©T% 77-T'jy 
^SaaP7 2{4«ifcJBE0llMB*H9 0 (B) tc^"T<fc 
■5*7*— v-y h-eB^-y^tlB^-r^ (7f77S 

6) . a«bfeA^5*«^rsiii««»-r»&tca:, 

09© (C) C^tJ;9§7*- 7>y HTA^^Ifffife 

[0053] mmk<owm7yfji>£mmjBm<D 

=r— ^tttfi7T^V>^m^7 2*^I»77'f;H 
frgl58 6 0MDffjEKaP8 7tA*StlTA-r>a||»4 
ifomSOBII»*fflV-»TMD2*i«f^«Sh*. ^t»C, M 



(8) 



«pB8¥ 1 1 -308 5 6 4 



13 

ACfWc»8 8imm&**:V 9 0 fefeS^CftEH* 

*l"£V*>f*— S^J— ^ 1 0 7 Q&ffiKK private (>f 

£rfflt>TMD 2*Bg^{tf £C£tc£0 
MAC2*Mt§ Uf77S7) o ^^^fBSg|58 
97(iC(0MAC2S:B9O CD) T^rf «fe 5 * 7 * - 

h^Ha^^^clSS-rS (Xf7^S8) o 
5*Wffi-r*««*«-r*^cttH9tD (E) ki^-Tci: 
•5 47*- Mcft£o MAC 2^i0^nfcB«7 

<Z)iB«:7 7^Wi. fBH^**JfflJa57 l<Dffl'mc&*)m 10 

«w»«S7 8owwc<tt)j»siaii7 7*^um»» 

[00 5 4] ±ELfc*5MH*»fc:J:ftHr. -Y*— 5> 

[0 0 5 5] J^Ttc. *»WO»6*«S»JB*SlWr 

[0 0 5 6] HI 0W^->^^PCM>Xb 
-;HTM?n§^^-^V>Xf A 1 0 8<D#§ 

[00 5 7] menmmmvimi o^t^^ic m 

A C 8 8 K private m Ett * nfc«SB 

H^^eU9 0^^ -I'^-^-^^XfA 1 0 8<Df*I 
SPT?ttft<, 0 8tC*tLTSJ!tfg&&: 

I C#-F 1 0 9<DftmcmifZ>tlT^Z> 0 Sfc, IC 
*— 5 tt. ^^-^-;^XfAl08<?) 

[oo5 8] mm&<Dmm7T^>\/hMmmm<DT—z 
ttemmyr^frWfc^s 6' omdamsbps 7jca;*j 40 

.**lT/N^>aB8»a:ifom^OBB»*fflV^TMD 2tf 
frSStlSo COMD2« I C*— KSiJffll8P8 5tD*iJ» 
tCcfcO I C*— F 1 0 9 (DMA CfFi£gP8 8tcJ^?>n 
& 0 MAC flzfiggp 8 8 (£M D 2 «&ffiflt K private ( I 
C*-F) «rffl^TBg#ftLTMAC 2«rf^«"ra 0 C 
(DMA C 2B I C*— K*J»SR8 5 OftHjffiHc i D^y ^ 
nim&8 9lc&hftTm9<D (D) (E) lc^*T 

m 5 nmm<D& 5 u: i c *— f 1 o 9 \cmAWsstmm 
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[0059] ±iHLfc»6*«BBj»jcj:ntf, mdmm 

1 c*-Fo*5&»KSffi*iB««M*"e«iau mm 

[0 0 6 0] WTKl*KWOJB7*«|»tt«rKWr*o 
fg 7 *SEgJ^«R«fg^<t8t5SCt# • SS^X-r AtcBI U ^ 

fc«eil3 (A) ^-Tcfc^tc. 9. 
£;l/£;^2 2 O-W* — /^2 2 1, I C ft— F 

2 2 2% HcO^B<D3Sii^^a^«« 1 2 0 &C & 0 £ 

[oo6i] zrc, temmimwicm^mft&tlr 

<Di/VT))/m^tttl&?£1±Zmi 3 (B) IC^T^BMI 
■9--^«S 1 1 0 CD®agg|5 2 0 2 lc £ 0 IBSMEtt 2 0 

3tctBi»^n^o 

[0062] ai^asi, -f s*9— ^o^hssiik 

f# • SflHMt l l i WWAtf^*;!/*^ ^ 2 2 0 lc£ 

BP2 1 i > mmwimz i o. 209. msmvs^z 0 8 

*^LT«*3R8B2 0 4tc^m^tl^ 0 »«^g|5 2 0 4 
»««Oi/U7;l/*#fc»JCt-*^BB«*IBti«tf*2 0 
3*^H*HiLTMDM»2 0 5lcm%o MD^JSKSB 
2 0 5«My->iBBa«<DBf«OH»*fflV^TMD*f^ 
«LTMACf^ricSP2 0 6lCiM& e MA 0^952 0 6 

ttaHMl^^eu 2 o 7jcfee,^i:«)iH«snTi/^a5?B 
Kffl^tMAc^rffiu ^pga^tfeicam^jffligB 
2 0 8. iift \E\m2 o 9, amt°i^2 1 o. jim^jwas 
2 1 i*^LT^is«ffi»»2 1 2icm% 0 ammmm 
as2 1 2^m^rz^mmtmm<D^vT)vm^t^ 

'Hitt9flW2 1 4tciJ|§ 0 &M«»mff2 1 4fc*SStfi 
H«i:«liOi/UT;l/#^i:*4>H«^-tU 2 l 3 teg 

[0 0 6 3] fnl^tc, 4JBflji^#aB2 1 2frZ>'£Mm<D 
■r-^^MD^a5 2 1 6tc. MAC*^^ffc8B2 1 7 

OBi»*ffl W^T C O^BMtO-r- * ^ 6 M D *f^fiR*T 
^> 0 tt#fk«2 1 7ttftHi^*U 2 1 8tcteit^nT 

v^ags^-^^BsaKpubiic ^ 
«v^TMAc^^t^^t;•r^ci:^J:0MD , *ff«-r 

^>o tt«-a«2 1 S^MD^MD 1 ^^rittJLT-a 

BEttaifi#a-e» ^> nfc * * 5 *m ^ - w-wjim 
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urn, mm<DmtpT*&&znT\,>%:\,^*wm-?z><Dtf 
[0 0 6 4] <Ltmmv--'* \ i oicmm^riT^ 
LTt<tv\ ±ihl^ 7 mmmmic^tii£, vmmm 

[0 0 6 5] &LTic*&w<Dm8^M&mttmw?z>o 

077Y;l/i:(if«3g!bWj:-3TL$5o ^tllcfctLTB 

tctb, wmzmm-tzMTi,*, m^comm^-f xt-« 20 
[0066] ^cr\ wisnmnmrHz, ±nz<Dmm* 

'JZfrUMtit^U 1 1 2lc:fc^T\ ti^¥-©6 0lcJ; 30 
0 «¥i*?:S^-r 5 C £:tc <£ ftfcBfSfr- * &B 

•**y 6ti2it$n§ 0 ^cccoH^-^tiis^ 

/hg|53 OOtcA73£*xT, *S?&fi3I©8?<i!fi<DB^;:^ 
t^tl5. CCD it, a— tf^MAC^^JgJg^gP 
3 0 2^rjSUrefe^ffiliELrcV^/J^^ft^:}f^-r 
cn^r-p; y^tfSgls 1 3^LTMDM 

[0 0 6 7] -7?, ffi^^^U 1 OKti, *^7iW 
cO-r-^^^U 3 0 1 Ksett£ftfc*y 7SS«r-^ 40 
£ , IC*- FMffllgP 4 1 cofiJ»tC <fc t> fflAfgUffl I C 
F 4 0fr6«E*mtfcfflABEfflOlWBfc*»6f^« 

C tO^SSi^ffl V M D m£g|5 9 t? 'f&S * n/c M D £Bg 

So 7rfu>^»a»i 3 t±saa»<op«S(oa« 
1 7 s. so 
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[0068] m \ 6it*nmmm<nm®7 : -Z7T'{)\' 

lc-0\,^TMW-t%rclb<DWT*&Z> a Hi 6fc5Vr<fc? 

Tfc < o MAC ftffcfg ®Sm^ 3 0 2 T'Jg^S ftfc, 

U a«-r— ^©^N<y^$fcttgiJ<DMA Cfl7 7l';l' 

[0 0 6 9] -75\ ttttttS&B 1 1 3T'(i, GtHfttt 
ftJffllgB 1 8 <DWmc <fc 0 IBfiS^i* 1 7 6 M A C RUM 

m ; r-zikm&-&\sT7 7<<v>>fwm.m>i 9\cm% 0 

7 r<< U > ygmtfi 9 TBMA C £r«^{t;g|3 2 It, H 

M?-5ttmm*'e<j 3 0 3icinso mmt%i2 1 

&WM*JH^TMAC*fc^fc-r*Ci:TMD 1 *f&« 
t5o Hfg^^U 3 0 3 tcfEtt^nfcHft!^— £ 

aais^/hgi53 0 4 T*m^©*i&'h73i*^i8'h;*n;te&, 

»*l^TMD2tfM3n*. — Stit«a5 2 3T»H:M 
D 1 £MD2t£iti$T?>c£fc£9B<ii7 i -£tfStfS 

[0070] j^tich 1 5%&mvT*¥m<Dm9nm 

«*«#U fro, *»«*OB«M±— 5£-9->TXO/jNy 
Dy^?:ffii:LT<gi§nn^IS7*-77 h<D 

[0 0 7 1 ] -rS^I/SEfiB**? 1 1 4<Dftmit±&L 

fc^^^SEsa*^^ 1 1 2<oftm£mv-e$>zii\ c 
(ommmmTimmm^ ■ 3 0 5%tu cct- 

«»0*«ltfEOH«*ffJ«r * 0 17 tc^-r 

«t -5 (c-^OA€*OXp -y ^*(4lcH««r^SJ-r 5 0 
^T-fU^^SglJl 3T?fi, §/h^"a-y^S(CMAC 
$rfF/£U /hXn-y ^@c0^-y^cMAC^##jAtr o 
MAC(*tT©B«7r-<7WiiSSiKt*:ffiiJ®Si5l 5(D$IJ®1 
ic J; OEWKtt 1 7 tCJi-U ->*±;i/B«t LTfE1Sc?ti 

[0 0 7 2] JiiJBf, Bff©ffi^iGH^i*^#S7b^ 

Bfcv-o.— -ss©pc 1 1 srt-es^y^h^x 

7306 ^rfijffl LTte®^<* 1 7 &K»U Lfc^- «J 

^/i/Bfifr e>i&g&§i5#<Dt8 1) hj b-*f>it;xg^p«a[tDB 

X, fg^S^ E*MM>^ * -£ 3 0 7 £: LTIMft 
353 0 6tcA73-Ti.o 77'fy>«l»l 3T'(i, fcf 
«-r««P««<DB«A^, W)S-rSffiS<DB^!Xa-y^ 

[0 0 7 3] 5fcS^ftlgfi 1 1 6 Id: 

tticn, nm&fcmmsv 1 8 cowmc <t o mm&& 1 
7^f.7ri ,| ;> ^"wagp 1 9 tc»*}»*B«s*ss*m 
r. Ks«»iai53 0 8x*t,*mnffifrmmicttLx&sm 
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So 

[0 0 7 4] £43, ±ELfcftfc«*aS»»KttJWT© 

1. **5»ci:9«^**JI«L.Tff Stl^H***-* 
©Hfcfi^&fcJ-f 5f->*^ /HEM* * =y > X r- A T'fe 

micm^x mmm?- ****** nfc*»s*»*«» 
-rs&a&sigisk, fr&ft«ck*is«k-rs7 , s?*>i/ 

©Bt^fb«*m^T^ttfcfl§T-**ffc*U C<0& 
[0 0 7 5] stt* aawwofflf— **ffJ*«-*fc*60 

-T s d t £ * 0 tut E3fc*«*nffl f-^^ltsci:^ 

(fffflsss) B&7 f -*fc#t-s&iac>a£#'>fc<T 

■J'aBR) *afflLT»6nfcv*-*»cWLT«f^b* 

3. fu§B?fc®l*»IgBfcS\ tfifBB^x-^fcfjfBm^fDgfl 

^-rscktcit), *ufEB®r-*#&fi£*i7£a>Sfr 
**»rr S C k *»» k f SSfiSc 2 letgcD t->* * /HESB 
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A. 

(fftBSftiR) B«-r-*©*ffl«551ffl-r-*{^^lc, 
fflABEfflOIIWH fc^Jraf « C k T\ B^©*StD*« 

io 5. fjiBm^Msau;^ umEsratT*-**^ iwibbi^ 
{mttm^rm i ©^a^ffl-r-^f^u mibb 

«-r-**>&, 1^fflAttBEffl7'-**^T*2©iX 

aimif-^«;MLT, ffies i rchs 2 <d*h^ 

Ao 

6 . HufBBAS:aEffl7 f -*&Cf HuSBg^{ta*K1g-rs 
ffit§3l5k, iMefflABIIffl?*— *fr6»2©aaaWtofli 

« 2 oBt^^aagp^HufBTj t^^Mv-cmmsmcMia. 

so LfcCk^^k-rs«fig4fBi!c07 r ^*;l/tiEK!l7J^7 

(flUB***) fflABffiffi-r-*fcW^ft**K*U m 
2 <D&a^fc]ffl 7*- * *ffc«-r S fit 2 <DBg^SaSgP^r, 
*^9»c»LT3|IBiife«:««*( ICA-Kf) teKl* 

*V»flfiA<0*7t5*fflVfe«*"Cfc, «*tc^A<OKiE 
RtfHlfg L fcB«05feSt©#^«:Sigl-r 5ti:^T-t 

Sc 

7. MfBW^SaSfflSli, «MEH«7*-*ktWBfflABE 

rmm&m&'tom x- * *^ «r set k -r s « 
fig 4 tm.n^f^^^m.ufi^ 7->xfA. 

(f^ffljft*) S^#cDf@A^IIffl(Dlf^kLT, B^x 
-*k<iA82ffiffix-**-&fr-efcx-**>e»s HufSBg 

^^ba^fflv^T*^s1^a]ffl7 ^ - : 5r^^-rs75■?^©^ 

»#o«ABiEffl7*-*oaaa**»n?#*o 
fflABSEfflx-^j^asnTJi^ntf, fflA^iEfflx 

so 8. 7J^5t<fci3»^»^ti^LTif e.n/cB^T 1 -* 
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x- * # $ nrc^ t £ 2fc&g*i*- f tc 

An^-T. tufBA^frBMB&H^&glS^lE^tT.&B 
{tx-*KttT£f^t£tT&5^*o.T^-F£, « 

^/-•^i/^-FiiSr^ru cnp.co^-F*^^ 

< i: fe 1 oOBtlO*- F^JtURf £>fci6<D^- F3S3R 
gGSrWT & c £ «ftflt £ -T * x ->* * >I/SE»* ^ 5 -> X x 

3 0 Xx-yl/Bft^JtSfmckty-^vl^e-F 
?a^L*- FT-tifg-rSil i:t?¥ff«^5 C 

tewr ssaawHaifflT*-*** 2 <mmm&m^Tft 
X'&wrzcttf-FizZo Lft*^t, mtf tibial 
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1 0. B«x— *©OT£*SlTSi:i:fcK:, a«-r- 

mmkjiiftzft l r a* $ ftfc affix- * * 7 r ^ y > 

^BSf 5 7 7 ■< U > ^BfflW , tut BBflix- * Xc $ 

rem 1 (D&mffinmT-zhLmmm?-* £*tm? 
2, c t t ± <? b«x- 9 (D&mvim&mm-T %> &m%m 
10 eat, web***— *»c»u »m<om»am^»tm 

^:?> C i.x> f ^;HaftSm->Xxi>o 
B«»c»L ifO J: 5 ailift«HjW6ll*nfc<0*»*«HBt? 

1 1. mtmmy 7 * >\>?mms.. ^^tvmmmm^ 

XxAtc^LTSHMiffiT-SD^ HufBfiAiglElf^RO 1 
MI29JOBg^ftll*IS*-r * t i: t tc, MfSflA^EIf 

1 2. Wfl3BllMiaitfflABffi1f**«*>-&TfSaL?!: 

(f^ffl**) B«S«HKOf r -^fe-&*fcB«x-^ 
«A«aifflOlll«*'&«>*ci:T?, Bft^S^Lfc 
A«%«fS-r«cfcA«T?*S. 

1 3. ttte««A*»tts n»E««M*KlB11*nfclB 
«-r-**, tflgBBtt^ T^V> ?$Mc\AmmSi ( >r- 
40 I r D A) % jlflB&^LTJgtrrSC 

fctc<kOA*-rscfc*#©i:-r5«fig9fBi8<Ox^^ 

•>'J7^-7;K SCSI, IrDA3P<DttjgS8E<D4!g : ? J ^ 

1 4. BufBilftx-^ti, *PflWftOSvica*««B»© 
B^x-^^rffllc LTfBliLfc^fifgffffiBflix-*-? 
so tuIBBg^^SgPti, tufB^a^ftJfflx-^^r^ 
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TSCtfcfctK B&£fUfflT«i-1f-«JiB»B$<Djg 
«*»cft#bftV^T»rao(IP«9Si« SrfUflif S C t 

1 5. WEWif*-*tt, l¥f*S©lVfc:SftS«»<0 

$.0, fuiB^M^SBft^-^rtogBftT 1 -*^ 

[0 0 7 6] 20 

[0 1 ] #fgBJl<DgI l HttJB«»c«*rS>*A'SE»** so 
[13 2] BfiRx— ^lCMAC*^*P$nS*-e<0#MM* 
[03] *«WO»2S6«UB«St«*^*;HI»*^ 

[0 4] *fm<Dm3nm&micmzTis : !ii)vmmj3* 

[05] Bfcx-£fcffiA&iMx-#£MAC*<ttSQ 

[06] *mi<om4%tetem\m%7 : i?*)\>tm-h* « 

=7 ^ XT i<0«ii&^t IT'S 5„ 

[07] Bfix-^KMAC 1 SUFMAC 2AMxT*0^n 
[0 8] *aWOS5*SS»«te«S-f^-: 5*0— -US' 

[09] m5nmmm<Dftm*mw-?zrzsb<D7u—T 
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[01 0] *«l«©S6*tt*»te«*-<*-S>-9--^ 
[011] l5»lO^^->'t-^->XfA(0i 

«««*^-r0t?$.5o 

[01 2] ^6«lfIO.l'^-^-/ i !->Xfi,Oi 

[013] *fgBflo^7Hfigm^«s«^tstTO# • 
[014] *&w<D&8mmBm\cm%7 t ~?*ji>M.M*} 

[01 5] ^WOJBQUliBBlBfcflRS^^/VKlItt* 
^ ^ ~>X7 L A(DlSfig^-r0T'fe^o 

[01 6] msmmnmicm^mmT-^yr^Mc-o 

[017] S 9 *IfffitI5I«f-^7 r ^;Hco 

1 -ItbVX, 

3 •••*■(■», 

4- A/DSJSI«, 

5- •m^sasas, 

6- B^^eu. 

7- --B^^a5, 

9-MDffr3cS|5, 
1 0-fHNb<«U. 
1 1 •MACffrjggP, 

i 2 -^'y$rmm^ 

1 3-77^ U >^WSSP, 

1 4 

i s-ew»Hmv, 
i 6-afligifis, 
1 7-&vm»* 
i 8-ewi^«ijflw, 

1 9 - yr^f v>ifmm^ 

2 i -areftak 

2 2-MDfft£gfl, 
2 3-Jt«-a«, 

2 4-a««uw», 

2 5 -jUIIeM, 

5 0- 1 -A^^SP, 

6 0-stm 

1 0 0-T f > ? ^;l/iE»a7J^'5, 

i o i -sia^fi^Mo 
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damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2 **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim l] The image pick-up section for being the digital of-evidence camera system which 
detects the alteration of the image data which picturized the photographic subject with the 
camera and was obtained, and picturizing a photographic subject, The cipher-processing 
section which creates the data for alteration detection from the image data obtained by the 
image pick-up using the encryption key built in beforehand, the camera to provide and the 
alteration detection section which detects whether said data for alteration detection were 
decrypted using the decryption key corresponding to said encryption key, and said image 
data was altered based on the result of this decryption " since - the digital of-evidence 
camera system characterized by becoming. 

[Claim 2] The image pick-up section for being the digital of-evidence camera system which 
detects the alteration of the image data which picturized the photographic subject with the 
camera and was obtained, and picturizing a photographic subject, The cipher-processing 
section which creates the data for alteration detection from the image data obtained by the 
image pick-up using the encryption key built in beforehand, The camera to provide and the 
alteration detection section which detects whether said data for alteration detection were 
decrypted using the decryption key corresponding to said encryption key, and said image 
data was altered based on the result of this decryption, since - the alteration supervision 
mode as which, as for said camera, said image data detects whether it was altered or not — 
in addition, with the secure mode in which encryption to the image data transmitted to 
said alteration detection section from said camera is performed It has the 
digital-watermarking mode which embeds digital-watermarking data at image data, and 
the normal mode which performs the usual photography without using a security function. 
The digital of-evidence camera system characterized by having the mode selection section 
for choosing the mode of at least one request from these modes. 
[Claim 3] The decryption key storage section memorized in accordance with the 1st 
decryption key corresponding to the 1st encryption key generated by equipment 
corresponding to the identifier of a proper, and this identifier, The decryption key output 
section which creates the data for alteration detection about said 1st decryption key using 
the 2nd encryption key, and is outputted in accordance with this data for alteration 
detection, and said 1st decryption key, A preparation ********** server and the decryption 
key storage section which memorizes said 1st decryption key acquired from said decryption 
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key server through means of communications etc., Said data for alteration detection 
supplied from said decryption key server through means of communications etc. are 
decrypted using the 2nd decryption key corresponding to said 2nd encryption key. the 
decryption key acquisition section equipped with the alteration detection section which 
detects whether said 1st decryption key was altered based on the result of this decryption 
- since - decryption key acquisition / registration system characterized by becoming. 
[Claim 4] With the filing Management Department which is the digital image edit system 
into which image data is edited, and does filing management of the image data inputted 
through the image input section while detecting the alteration of image data While 
decrypting the 1st data for alteration detection beforehand given to said image data using 
the decryption key corresponding to the encryption key used when creating this data for 
alteration detection The alteration detection section which detects the alteration condition 
of image data by comparing this the 1st decoded data for alteration detection and said 
image data, To said image data from the edited image data to which various image 
processings were performed by the image editorial department which performs various 
kinds of image processings, and said image editorial department, and the data of the edit 
hysteresis by said image editorial department the renewal section of an image file which 
creates the 2nd data for alteration detection using an encryption key other than said 
encryption key, and adds this to said edited image data — since ■- the digital image edit 
system characterized by becoming. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to a digital of-evidence camera system, 

decryption key acquisition / registration system, and a digital image edit system. 

[0002] 

[Description of the Prior Art] The photograph analogically recorded on the film and media 
of the former, for example, a camera, and voice are used as what has the certification force 
in a trial etc. By advance of digital technique in recent years, the equipment which records 
an image and voice as digital data has spread. According to such digitization, the 
advantage which does not deteriorate even if it copies and which can be quickly distributed 
using a communication line in which processing and edit of the contents of information can 
be performed further easily is acquired. However, I hear that that processing and edit are 
easy can alter the contents of information easily by one side, there is, and room to suspect 
weight of the evidence as information is produced. Therefore, in order to enable it to use a 
digital image and voice as a piece of evidence, it is required to have the function to prevent 
the alteration of digital data by a certain approach. The camera which has such a 
prevention function is called the digital camera of evidence. 

[0003] In order to realize this digital camera of evidence, it considers applying the 
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electronic signature technique generally used by the communication link etc. Two keys 
used as a pair are used in an electronic signature system. One is called a private key with 
the key for encryption, and another side is called a public key with the key for a decryption. 
It is enciphered using a private key and digital data is decrypted using a public key. 
Although a tropism function is used on the other hand in quest of a public key from a 
private key, on the other hand, this thing [ asking for a private key ] is mathematical very 
difficult from the public key conversely with the property of a tropism function. While it 
needs to be severely managed so that no men other than an owner can use a private key by 
any means, generally a public key is exhibited so that anyone can use. 

[0004] The approach of alteration detection is a transmitting side and creates the code first 
called a message digest (Message Digest, following, MD) using a Hash Function etc. from 
the target digital data. If the method of extracting MD from the target digital data is 
exhibited and there are original data, anyone can extract MD. Incidentally, MD has the 
property in which a value changes a lot, when the original digital data differ from the good 
and known property. 

[0005] Next, extracted MD is enciphered using a private key and he is a message 
authentication child (Message Authentication Code, following, MAC) about this. It carries 
out and transmits to the other party with original data. Here, the public key used as a 
private key and a pair shall be certainly passed to the addressee (an addressee may cross 
to the 3rd person's hand that what is necessary is just to surely have obtained the key). 
[0006] In order to investigate that original data are not altered, first, a Hash Function etc. 
is used for a receiving side from original data, and it asks for MD'. Next, MAC is decrypted 
using a public key, MD is calculated, and it investigates whether this MD and MD* are in 
agreement. Even if original data are altered by the 3rd person, since the 3rd person does 
not have a private key, he cannot create MAC which can be decrypted with a public key, 
but becomes a different value from MD and MD 1 . This shows that original data were 
altered by the 3rd person. 
[0007] 

[Problem(s) to be Solved by the Invention] As described above, in order to detect the 
alteration of digital data, an electronic signature technique is applicable. However, when 
the approach of alteration detection which was described above was adopted as a digital 
camera of evidence, although it did not reveal by any means, conventionally, it was not 
easy to manage this private key on high security level, therefore, as for the private key as 
an encryption key, it was not able to heighten the weight of the evidence of a digital image. 
[0008] Moreover, in the case of an image, there is the need of processing a data 
compression, field logging, insertion of a caption, etc. on the property of data, in many 
cases, but conventionally, by the approach of the electronic signature applied to document 
data, if it changes even when the contents of data are slight, it will be considered that data 
were altered. Therefore, in the conventional electronic signature system, required edit was 
not completed at all on the property of the above image data. 

[0009] The place which this invention is made paying attention to such a technical problem, 
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and is made into the purpose The digital of-evidence camera system which can heighten 
the weight of the evidence of a digital image, and can manage an encryption key on very 
high security level, Decryption key acquisition - It is offering a registration system, and 
even if it edits compression which is further needed on the property of an image, field 
logging, insertion of a caption, etc., it is in offering the digital image edit system which can 
maintain the weight of the evidence of a digital image. 
[0010] 

[Means for Solving the Problem] In order to attain the above-mentioned purpose, the 1st 
invention The image pick-up section for being the digital of-evidence camera system which 
detects the alteration of the image data which picturized the photographic subject with the 
camera and was obtained, and picturizing a photographic subject, The cipher-processing 
section which creates the data for alteration detection from the image data obtained by the 
image pick-up using the encryption key built in beforehand, Said data for alteration 
detection are decrypted using the camera to provide and the decryption key corresponding 
to said encryption key, and it consists of the alteration detection section which detects 
whether said image data was altered based on the result of this decryption. 
[00 ll] Moreover, the image pick-up section for the 2nd invention being a digital 
of-evidence camera system which detects the alteration of the image data which picturized 
the photographic subject with the camera and was obtained, and picturizing a 
photographic subject, The cipher-processing section which creates the data for alteration 
detection from the image data obtained by the image pick-up using the encryption key 
built in beforehand, Said data for alteration detection are decrypted using the camera to 
provide and the decryption key corresponding to said encryption key. It consists of the 
alteration detection section which detects whether said image data was altered based on 
the result of this decryption. Said camera Whether said image data was altered to the 
alteration supervision mode to detect In addition, the secure mode in which encryption to 
the image data transmitted to said alteration detection section from said camera is 
performed, It has the digital-watermarking mode which embeds digital-watermarking 
data at image data, and the normal mode which performs the usual photography without 
using a security function, and has the mode selection section for choosing the mode of at 
least one request from these modes. 

[0012] The 3rd invention is decryption key acquisition / registration system. To equipment 
Moreover, the identifier of a proper, The decryption key storage section memorized in 
accordance with the 1st decryption key corresponding to the 1st encryption key generated 
corresponding to this identifier, The decryption key output section which creates the data 
for alteration detection about said 1st decryption key using the 2nd encryption key, and is 
outputted in accordance with this data for alteration detection, and said 1st decryption key, 
A preparation ********** server and the decryption key storage section which memorizes 
said 1st decryption key acquired from said decryption key server through means of 
communications etc., Said data for alteration detection supplied from said decryption key 
server through means of communications etc. are decrypted using the 2nd decryption key 
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corresponding to said 2nd encryption key. It consists of the decryption key acquisition 
section equipped with the alteration detection section which detects whether said 1st 
decryption key was altered based on the result of this decryption. 

[0013] With moreover, the filing Management Department which the 4th invention is a 
digital image edit system into which image data is edited while detecting the alteration of 
image data, and does filing management of the image data inputted through the image 
input section While decrypting the 1st data for alteration detection beforehand given to 
said image data using the decryption key corresponding to the encryption key used when 
creating this data for alteration detection The alteration detection section which detects 
the alteration condition of image data by comparing this the 1st decoded data for alteration 
detection and said image data, To said image data from the edited image data to which 
various image processings were performed by the image editorial department which 
performs various kinds of image processings, and said image editorial department, and the 
data of the edit hysteresis by said image editorial department The 2nd data for alteration 
detection is created using an encryption key other than said encryption key, and it consists 
of the renewal section of an image file which adds this to said edited image data. 
[0014] 

[Embodiment of the Invention] Hereafter, the operation gestalt of this invention is 
explained to a detail with reference to a drawing. Drawing 1 is drawing showing the digital 
of-evidence camera structure of a system concerning the 1st operation gestalt of this 
invention, and consists of a digital camera 100 of evidence and alteration test equipment 
101. The camera section 50-1 of the digital camera 100 of evidence has the image pick-up 
means 60 which consists of a taking lens 1, an image sensor 2, amplifier 3, A/D converter 4, 
and the signal-processing section 5. The photographic subject image which carried out 
incidence through the taking lens 1 is picturized by the image sensor 2. The electrical 
signal acquired by this image pick-up is amplified by the amplifier 3, and after being 
changed into a digital signal in the A/D -conversion section 4 and performing signal 
processing predetermined in the signal-processing section 5, it is memorized as image data 
in an image memory 6. The image data memorized in this image memory 6 is displayed on 
the image display section 7 if needed. 

[0015] The image data memorized in the image memory 6 is changed into the graphics 
format of criteria, such as JPEG and TIFF, in the file -format-conversion section 8. Thereby, 
the file format by which the data of header information were added to image data is 
created ((A) of drawing 2 ). Next, in MD creation section 9, MD is created by applying 
predetermined functions, such as a Hash Function, to the data of the whole also including 
image data or a header ((B) of drawing 2 ). Next, in the MAC creation section 11, MAC is 
created by enciphering MD using the private key Kprivate (camera) memorized beforehand 
in the private key memory 10 ((C) of drawing 2 ). Next, at the header Records Department 
11, created MAC is stored in an image header ((D) of drawing 2 ). At the filing 
Management Department 13, file management to the image file of the file format created 
by doing in this way is performed. 
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[0016] Such an image file demounts by control of the storage control section 15, and in 
order to detect whether it was altered while having been transmitted through the 
communication line 16 by control of the communications control section 14 while being 
memorized and carried by the possible storage 17 or, alteration detection equipment 101 is 
used. 

[0017] That is, the image file memorized by the storage 17 with which alteration test 
equipment 101 was equipped is read to the filing Management Department 19 by control of 
the storage control section 18. Or the image file concerned is sent to the filing Management 
Department 19 through a communication line 25 by control of the communications control 
section 24. At the filing Management Department 19, an image file is divided into MAC 
and image data (header information other than the image data itself, such as JPEG and 
TIFF, may be included in this image data), MAC is inputted into the decryption section 21, 
and image data is inputted into MD creation section 22. 

[0018] In the decryption section 21, MD1 is generated by decrypting MAC using the public 
key Kpublic (camera) memorized beforehand in the public key memory 20. This public key 
Kpublic (camera) and the above mentioned private key Kprivate (camera) are keys which 
serve as a pair in encryption/decryption processing. On the other hand, in MD creation 
section 22, MD2 is generated using predetermined functions, such as a Hash Function, 
from the inputted image data. Next, in the comparison coincidence section 23, when MD1 
is compared with MD2 and both are not in agreement, it can judge with the image file 
having been altered by the 3rd person. 

[0019] According to the above-mentioned 1st operation gestalt, the data (MAC) for 
alteration detection are created using the encryption key in a camera from image data, and 
it can check whether image data is altered by writing in this data for alteration detection 
in an image file, for example, the header information of an image. The weight of the 
evidence of the digital image it was presupposed that it was inferior of a digital image by 
this compared with the image conventionally photoed using the film can be heightened. 
[0020] Moreover, by this operation gestalt, although the encryption key for creating the 
data for alteration detection is not revealed outside by any means including a camera user, 
since the encryption key for creating the data for alteration detection is beforehand stored 
in the memory area in a camera, it can manage an encryption key on very [ in hard ] high 
security level. 

[0021] Next, the digital camera of evidence which has various kinds of modes (multimode) 
as the 2nd operation gestalt of this invention is explained. Here, the function of the request 
according to the purpose of using a camera can be set up by equipping a camera with the 
optional feature in the following various modes. Various modes are secure modes which 
encipher an image file here, the usual photography mode in which a security function is 
not used, the alteration supervision mode which gives alteration detection data to the 
photoed image file and the digital-watermarking mode which records the photoed 
copyright information on a photograph on an image file as digital watermarking, when 
saving an image file further at a dismountable storage, or when transmitting an image file 
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using communication facility. 

[0022] Hereafter, with reference to drawing 3 , it explains to a detail further. What has the 
same reference number as drawing 1 in drawing 3 shall have the same function. In the 
digital camera 102 of evidence which consists of the camera section 50-2 in this operation 
gestalt, a user can choose [ from ] the desired mode among various kinds of modes 
described above in the mode selection section 31. 

[0023] For example, when normal mode is chosen, the image data which picturized the 
photographic subject with the image pick-up means 60, and was obtained is memorized in 
an image memory 6. Especially in this mode, security mode does not work, but format 
conversion is carried out in the file -format-conversion section 8, the image data read from 
the image memory 6 is sent to the filing Management Department 13, and file 
management is carried out. 

[0024] Moreover, when digital-watermarking mode is chosen, after image data is inputted 
into the digital-watermarking creation section 30 from the file-format-conversion section 8 
and digital-watermarking data are embedded at the image data concerned, it is again 
returned to the file-format-conversion section 8, conversion of a format is performed in it, 
and file management is carried out to it at the filing Management Department 13. 
[0025] Moreover, when alteration prevention mode is chosen, after MAC is added to a 
header by the approach described above with reference to drawing 2 , file management is 
carried out at the filing Management Department 13. 

[0026] Moreover, when alteration detection mode is chosen, detection of the existence of 
the alteration to the image file which it was acquired from the external device through the 
storage 17 or the communication line 16 (PC, alteration test equipment, etc.), and was sent 
to the filing Management Department 13 is performed. That is, the image data to which 
MAC was added is divided into MAC and image data, image data is inputted into MD 
creation section 33 from the filing Management Department, and MAC is inputted into the 
decryption section 34. In MD creation section 33, MD is generated using predetermined 
functions, such as a Hash Function, from the inputted image data. Moreover, the 
decryption section 34 generates MD' using the public key Kpublic (camera) memorized by 
the public key memory 35. It judges whether the comparison coincidence section 32 
compares MD and MD\ and is in agreement. When both are not in agreement, it turns out 
that image data was altered by the 3rd person. 

[0027] Moreover, secure mode is used when memorizing image data to a storage. In this 
case, image data is read from the filing Management Department 13, and it is inputted 
into the encryption section 36. The encryption section 36 enciphers this image data using 
the share key memorized by the share key memory 37, and sends the enciphered image 
data to the filing Management Department 13 again. Then, this enciphered image data 
demounts by control of the record-medium control section 15, and it is written in the 
possible storage 17. 

[0028] Moreover, secure mode is used also when transmitting an image file through a 
communication line. In this case, image data is read from the filing Management 
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Department 13, and it is inputted into the encryption section 36. The encryption section 36 
enciphers this image data using the share key memorized by the share key memory 37, 
and transmits the enciphered image data to external devices (PC, alteration test 
equipment, etc.) through a communication line 16 by control of the communications control 
section 14. 

[0029] According to the above-mentioned 2nd operation gestalt, copyright can be kept by 
taking a photograph by normal mode, when photographing a snap image, and taking a 
photograph in digital-watermarking mode to alteration supervision mode and the image 
which wants to keep copyright, for example, in photoing the thing used as an image of 
evidence. Furthermore, preservation and transmission of data can be carried out to 
insurance by choosing secure mode to photo the high image of confidentiality and transmit 
an image file to insurance. Moreover, it becomes possible by combining two or more modes 
to use one camera for various applications from the above-mentioned effectiveness. 
[0030] With reference to drawing 4 , the 3rd operation gestalt of this invention is explained 
below. In drawing 4 , the thing of the same reference figure as drawing 1 shall have the 
same function. Moreover, although the configuration in the communication facility of 
drawing 1 and the various modes of drawing 3 is omitted here, of course, you may have 
these functions. In the digital camera 103 of evidence which has the camera section 50"3, 
the image data obtained by picturizing a photographic subject with the image pick-up 
means 60 is memorized in an image memory 6. Image data is read from an image memory 
6 to the file "format-conversion section 8, and it is changed into the graphics format of 
criteria, such as JPEG and TIFF. Thereby, the file format by which the data of header 
information were added to image data is created ((A) of drawing 5 ). 

[0031] The information for personal authentication is read from IC card 40 for personal 
authentication with which the camera section 50-3 was equipped by control of the IC card 
control section 41 to coincidence, and it is inputted into the file -format- conversion section 8, 
and it is recorded as the information for personal authentication shows a header at (B) of 
drawing 5 . Next, in MD creation section 9, MD is created by applying predetermined 
functions, such as a Hash Function, to the whole data or image data, and the data for 
personal authentication ((C) of drawing 5 ). Next, in the MAC creation section 11, MAC is 
created by enciphering MD using the private key Kprivate (camera) memorized beforehand 
in the private key memory 10 ((D) of drawing 5 ). In addition to the data and the data for 
personal authentication of image header information, at the header Records Department 
12, MAC is stored in an image header. Thereby, in a graphics format as shown in (E) of 
drawing 5 , an image file is saved at the filing Management Department 13, and file 
management is carried out. 

[0032] Such an image file demounts by control of the storage control section 15, and in 
order to detect whether it was altered while being memorized and carried by the possible 
storage 17, alteration detection equipment 104 is used. 

[0033] That is, the image file memorized by the storage 17 with which alteration test 
equipment 104 was equipped is read to the filing Management Department 19 by control of 
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the storage control section 18. At the filing Management Department 19, it separates into 
the whole data which need an image file to calculate MAC and the above mentioned MAC, 
i.e., the data except MAC, image data (header information other than the image data itself, 
such as JPEG and TIFF, may be included in this image data), and the data for personal 
authentication, MAC is inputted into the decryption section 21, and data required to 
calculate MAC are inputted into MD creation section 22. Furthermore, the data for 
personal authentication are inputted also into the individual humanity news read-out 
section 22. 

[0034] In the decryption section 21, MD1 is generated by decrypting MAC using the public 
key Kpublic (camera) memorized beforehand in the public key memory 20. On the other 
hand, in MD creation section 22, MD2 is generated using predetermined functions, such as 
a Hash Function, from the inputted image data. Next, in the comparison coincidence 
section 23, when MD1 is compared with MD2 and both are not in agreement, it can judge 
with having been altered by the 3rd person. 

[0035] Moreover, in the individual humanity news read-out section 42, specification of a 
photography person is performed by reading the data for personal authentication. Here, 
specification of a photography person is meaningful only when it is checked that image 
data is not altered. 

[0036] According to the above-mentioned 3rd operation gestalt, not only the existence of an 
alteration of an image but an image photography person can specify by adding the 
information for personal authentication at the time of the data origination for alteration 
detection of image data. Especially, as information for a photography person's personal 
authentication, since the data for alteration detection are created from the data with which 
image data and the data for personal authentication were aligned using said encryption 
key, the alteration of image data and the alteration of a photography person's data for 
personal authentication are detectable with one alteration detection data here. If a 
photography person's data for personal authentication are not altered, a photography 
person can be specified from the data for personal authentication. 

[0037] The 4th operation gestalt of this invention is explained below. In drawing 6 , the 
thing of the same reference figure as drawing 1 shall have the same function. Moreover, 
although the configuration in the communication facility of drawing 1 and the various 
modes of drawing 3 is omitted here, of course, you may have these functions. In the digital 
of-evidence camera system 105 which has the camera section 50-4, the image data 
obtained by picturizing a photographic subject with the image pick-up means 60 is 
memorized in an image memory 6. Image data is read from an image memory 6 to the 
file-format-conversion section 8, and it is changed into the graphics format of criteria, such 
as JPEG and TIFF, Thereby, the file format by which the data of header information were 
added to image data is created ((A) of drawing 7 ). Next, in MD creation section 9, MD1 or 
MD2 (B [ of drawing 7 / (B) ], (B)') is generated using predetermined functions, such as a 
Hash Function, from the whole data or image data. These MD1 and MD2 may be the same. 
MD1 is inputted into the MAC creation section 11. In the MAC creation section 11, MAC is 
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calculated using the private key Kprivate (camera) beforehand memorized by the private 
key memory 10, and MAC1 is created ((C) of drawing 7 ). This MAC1 is sent to the header 
Records Department 12. 

[0038] On the other hand, MD2 is inputted into IC card 40' for personal authentication 
with which the camera section 50-4 was equipped through the IC card control section 41. 
In IC card40 f for personal authentication, MD2 is enciphered using the private key 
Kprivate (IC card) memorized by internal private key memory, and MAC2 is created ((C) ! 
of drawing 7 ). This MAC2 is sent to the header Records Department 12 through the IC 
card control section 41. 

[0039] In addition to the data of image header information, at the header Records 
Department 12, MACl and MAC2 are stored in an image header. Thereby, in a graphics 
format as shown in (D) of drawing 7 , an image file is saved at the filing Management 
Department 13, and file management is carried out. 

[0040] Such an image file demounts by control of the storage control section 15, and in 
order to detect whether it was altered while being memorized and carried by the possible 
storage 17, alteration detection equipment 106 is used. 

[0041] That is, the image file memorized by the storage 17 with which alteration test 
equipment 106 was equipped is read to the filing Management Department 19 by control of 
the storage control section 18. 

[0042] At the filing Management Department 19, an image file is divided into MACl, 
MAC2, and image data (header information other than the image data itself, such as JPEG 
and TIFF, may be included in this image data), MACl is inputted into the decryption 
section 21*1, and image data is inputted into MD creation section 22-1. In the decryption 
section 21*1, MD1 is generated by decrypting MACl using the public key Kpublic (camera) 
beforehand memorized by public key memory 20'. A public key Kpublic (camera) and a 
private key Kprivate (camera) are keys which serve as a pair in encryption/decryption 
processing. On the other hand, in MD creation section 22*1, MDT is generated using 
predetermined functions, such as a Hash Function, from the inputted image data. Next, in 
the comparison coincidence section 23*1, when MD1 is compared with MDT and both are 
not in agreement, it can judge with being altered by the 3rd person. 

[0043] Similarly, MAC2 is inputted into the decryption section 21-2, and image data is 
inputted into MD creation section 22*2. In the decryption section 21-2, MD2 is generated 
by decrypting MAC2 using the public key Kpublic (IC card) beforehand memorized by 
public key memory 20'. A public key Kpublic (IC card) and a private key Kprivate (IC card) 
are keys which serve as a pair in encryption/decryption processing. 

[0044] On the other hand, in MD creation section 22-2, MD2' is generated using 
predetermined functions, such as a Hash Function, from the inputted image data. Next, in 
the comparison coincidence section 23*2, when MD2 is compared with MD2* and both are 
in agreement, a photography person can be specified. 

[0045] According to the above-mentioned 4th operation gestalt, not only the existence of an 
alteration of an image but an image photography person can specify by adding the 
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information for personal authentication at the time of the data origination for alteration 
detection of image data. It is possible to apply especially, the electronic signature used with 
other information systems, such as an electronic mail and electronic commerce, as 2nd 
data for alteration detection, since the 2nd data for alteration detection created with the 
equipment of the camera exterior as information for a photography person's personal 
authentication here is used. Therefore, an infrastructure- [ an electronic authentication 
office, electronic commerce, etc. ] information system and the digital of-evidence camera 
system which was able to take cooperation can also be built. 

[0046] Below, the 5th operation gestalt of this invention is explained. The 5th operation 
gestalt is related with the digital image edit system using the image server constituted 
from hardware, such as a board and a PCMCIA card. Here, in order to simplify explanation, 
the minimum configuration of an image server is assumed. 

[0047] Conventionally, by the approach using the data for alteration detection used to 
document data, it was considered that it was altered when original data were changed, 
even when it was only small. However, about image data, processing of compression, a 
clipping, insertion of a caption, etc., etc. is needed on the property of data in many cases. If 
it is the case of the photograph using a film, only a required part can be burned on printing 
paper, or it is equivalent to describing a comment on the reverse side of a photograph. If 
there is a legal excuse, such processing will not be in charge of an alteration. There is the 
approach of what kind of processing was performed to original image data and recording 
the processing hysteresis as an approach for judging whether just processing was made. 
[0048] With this operation gestalt, it detects whether it is altered with the hysteresis of the 
performed processing except the image server by using an image server in the image which 
processed the clipping of a field of compression of a part of image data, the addition of a 
caption, etc. 

[0049] Drawing 8 consists of a personal computer 107-1 and an image server 107-2 which 
consists of a PCMCIA card with which this personal computer 107*1 can be equipped, as it 
is drawing showing the configuration of the image server system 107 of the 5th operation 
gestalt, for example, is shown in drawing 11 . 

[0050] An operation of the 5th operation gestalt is explained with reference to the flow 
chart of drawing 9 below. First, the filing Management Department 72 acquires the image 
file of a format as shown in (A) of drawing 9 from a storage 70 by control of the storage 
control section 71. Or the image file concerned is acquired from an external device 93 by 
control of the communications control section 78 through a communication line 77 (step Si). 
In this case, an image file can be easily inputted from an external device by preparing the 
filing Management Department 72 connection terminals, such as a serial cable in which 
direct continuation is possible, and SCSI, IrDA. Moreover, the same effectiveness is 
acquired even when it has the terminal of network connections, such as Ethernet. Next, 
the MAC verification section 73 receives an image file from the filing Management 
Department 72, and verifies MACl (step S2). That is, the filing Management Department 
72 divides an image file into MACl and image data, MACl is inputted into the decryption 



11/22 



Japanese Publication number : 11-308564 A 



section 75, and image data is inputted into MD creation section 76. The decryption section 
75 is decrypted using the public key Kpublic (camera) memorized by the public key 
memory 74, and creates MD1. Moreover, MD creation section 76 creates MDT using 
predetermined functions, such as a Hash Function. By comparing MDl with MDl', the 
comparison coincidence section 79 sends the verification result about whether the image 
photoed with the camera is altered after that to the filing Management Department 72. 
[0051] When not altered, an image file is inputted into the image editorial department 93 
from the filing Management Department 72, and image edit by the user using the image 
edit tool 80 is performed (step S3). In this case, the contents of the image file are displayed 
on an image display device 82, looking at this screen, using data entry units (a keyboard, 
mouse, etc.) 84, various kinds of processings are required or a user 91 inputs data. 83 is the 
user interface of a user 91 and the image server 107. The hysteresis at the time of edit is 
recorded on the edit hysteresis Records Department 81. The edit hysteresis Records 
Department 81 reads the information for personal authentication from IC card 92 for 
personal authentication to coincidence by control of the IC card control section 85, and 
records on it into edit hysteresis. The above-mentioned edit is continued until directions of 
an edit halt are issued by the user and decision of step S5 serves as NO. 
[0052] Since the image file after edit and the data of edit hysteresis are sent to the filing 
Management Department 72, the filing Management Department 72 records on an image 
header in a format as shows the information on edit hysteresis to (B) of drawing 9 (step S6). 
In leaving the information which specifies the photoed camera, it also records camera 
information on an image header in a format as shown in (C) of drawing 9 . 
[0053] Next, the image file after edit and the data of edit hysteresis are inputted into MD 
creation section 87 of the renewal section 86 of an image file from the filing Management 
Department 72, and MD2 is created using predetermined functions, such as a Hash 
Function. Next, the MAC creation section 88 creates MAC2 by enciphering MD2 using the 
private key Kprivate of the image server 107 memorized beforehand (image server) in the 
private key memory 90 (step S7). At the header Records Department 89, it records on an 
image header in a format as shows this MAC2 by (D) of drawing 9 (step S8). In leaving the 
information which specifies a camera, it becomes a format as shown in (E) of drawing 9 . 
The image file to which MAC2 was added is sent to the filing Management Department 72, 
and after this, it demounts by control of the storage control section 71, and is saved at the 
possible storage 70, or this image file is sent to an external device 93 through a 
communication line 77 by control of the communications control section 78, and is saved. 
[0054] Since it can check whether what kind of processing was performed from the original 
image file, or the contents of an image have been changed except an image server by using 
an image server according to the above-mentioned 5th operation gestalt, it is not altered 
even if it performs required processing on the property of a data compression or image data 
like field logging. Moreover, when creating the data for alteration detection added to an 
image file after edit by the image server, the user who edited the image can be specified by 
using the data for personal authentication. 
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[0055] Below, the 6th operation gestalt of this invention is explained. The 6th operation 
gestalt constitutes the image server in the 5th operation gestalt from software started On 
PC etc. Here, in order to simplify explanation, the minimum configuration of an image 
server is assumed. 

[0056] Drawing 10 is drawing showing the configuration of the image server system 108 
constituted by installing an image server in PC. Here, only a different point from the 
configuration of the 5th operation gestalt shown in drawing 8 is explained. 
[0057] As the 6th operation gestalt shows to drawing 10 , it is [ the MAC creation section 
88 and ] a private key Kprivate. The memorized private key memory 90 is formed in the 
interior of IC card 109 which can be detached and attached freely to the not the interior but 
image server 108 of the image server system 108. Moreover, the IC card control section 85 
is formed in the interior of renewal section of image file 86' of the image server system 108. 
[0058] The image file after edit and the data of edit hysteresis are inputted into MD 
creation section 87 of renewal section of image file 86', and MD2 is created using 
predetermined functions, such as a Hash Function. This MD2 is sent to the MAC creation 
section 88 of IC card 109 by control of the IC card control section 85. The MAC creation 
section 88 enciphers MD2 using a private key Kprivate (IC card), and creates MAC2. This 
MAC2 is recorded on an image header in a format as sent to the header Records 
Department 89 by control of the IC card control section 85 and shown in (D) of drawing 9 , 
or (E). In addition, the information for personal authentication is stored in IC card 109 like 
the 5th operation gestalt, and this is read and you may make it record into edit hysteresis. 
[0059] Since according to the above-mentioned 6th operation gestalt in addition to the 
effectiveness of the 5th operation gestalt it constitutes from a storage in which attachment 
and detachment like an IC card of management of an encryption key and processing of 
encryption are free and other functions, such as edit of an image and creation of edit 
historical data, were constituted from software, it has the effectiveness that an image 
server can be built by low cost. 

[0060] The 7th operation gestalt of this invention is explained below. The 7th operation 
gestalt consists of a public key server style and a public key acquisition / registration 
device of alteration test equipment and an image server about decryption key acquisition / 
registration system. For the private key as encryption and the public key as a decryption 
key which are used with this operation gestalt, as shown in drawing 13 (A), it is generated 
by the manufacturer according to the key generation device 120 at the time of manufacture 
of equipments, such as a digital camera 220, and the image server 221, IC card 222, among 
these a private key is built-in to equipment, It is registered. This private key is 
immediately eliminated by insurance and the positive approach after registration. 
[0061] Moreover, a public key is memorized by the record medium 203 by the key 
registration section 202 of the public key server style 110 which equipment is made to 
correspond with the serial number as an identifier of a proper, and is shown in drawing 13 
(B). 

[0062] When performing alteration detection to alteration detection equipment and the 
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image by which public key acquisition / registration device 111 of an image server was 
photoed with the digital camera 220, the serial number of equipment is transmitted to the 
key retrieval section 204 through the communications control section 211, communication 
lines 210 and 209, and the communications control section 208 from the public key 
acquisition section 212. The key retrieval section 204 reads the public key corresponding to 
the serial number of equipment from a storage 203, and sends it to MD creation section 
205. MD creation section 205 creates MD using predetermined functions, such as a Hash 
Function, and sends it to the MAC creation section 206. The MAG creation section 206 
creates MAC using the private key beforehand memorized by the private key memory 207, 
and sends it to the public key acquisition section 212 through the communications control 
section 208, a communication line 209, a communication line 210, and the communications 
control section 211 with a public key. The public key acquisition section 212 sends the 
acquired public key and the serial number of equipment to the public key registration 
section 214. The public key registration section 214 registers a public key and the serial 
number of equipment concerned into the public key memory 213. 

[0063] The data of a public key are sent to MD creation section 216 from the public key 
acquisition section 212, and MAC is sent to coincidence at the decryption section 217. MD 
creation section 216 creates MD from the data of this public key using predetermined 
functions, such as a Hash Function. The decryption section 217 creates MD' by decrypting 
MAC using the public key Kpublic of the key management server memorized by the public 
key memory 218 (key management server). The comparison coincidence section 215 detects 
an alteration by whether MD and MD' is compared and it is in agreement. It is the purpose 
that by which the camera obtained by means of communications and the public key of an 
image server were acquired from the just key management server, and that verification of 
MAC here checks whether it is further altered in the middle of the communication link. 
[0064] In addition, you may make it send the public key registered into the public key 
server 110 to a user with safe means, such as mailing. According to the above-mentioned 
7th operation gestalt, the decryption key of the data for alteration detection is acquirable 
by sending the serial number of equipment to a decryption key (public key) server. When it 
follows, for example, a decryption key server can be used from the Internet, the data for 
alteration detection can be acquired even from where among the world based on the serial 
number of a camera. 

[0065] The 8th operation gestalt of this invention is explained below. The 8th operation 
gestalt is related with alteration prevention of a multiplex resolution image. When a 
document file changes a part, a text stops connecting, semantics will change and the 
contents will differ from the original file. Since redundancy of image data is high, even if it 
performs edit of some, such as modification of resolution, to it, a photographic subject can 
be recognized in many cases. Therefore, since being the magnitude beyond the need and 
wanting to drop resolution on the image size at the time of photography and an 
unnecessary part are reflected, in some cases, I want to start only a required part in the 
side using an image. However, the image server for alteration prevention must usually be 
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prepared, an image must be edited in the interior, and MAC must be added again. 
[0066] So, in the 8th operation gestalt, in order to solve the above-mentioned problem, the 
image of an alteration prevention camera is saved in the format holding a multiplex 
resolution image. Drawing 1414 is drawing showing the configuration of the 8th operation 
gestalt of this invention. In the digital of-evidence camera section 112, the image data 
obtained by picturizing a photographic subject with the image pick-up means 60 is 
memorized in an image memory 6. Next, this image data is inputted into the image 
contraction section 300, and is changed into the image of two or more kinds of resolution. If 
the minimum resolution to which a user wants to guarantee an alteration through the 
MAC creation resolution directions section 302 is specified at this time, this will be sent to 
MD creation section 9 through the filing Management Department 13. In MD creation 
section 9, MD is created using predetermined functions, such as a Hash Function. 
[0067] On the other hand, the private key created from the data of the camera proper 
memorized by the data memory 301 of a camera proper and the information for personal 
authentication read from IC card 40 for personal authentication by control of the IC card 
control section 41 is memorized by the private key memory 10. In the MAC creation section 
11, MD created in MD creation section 9 using this private key is enciphered, MAC is 
created, and it sends to the filing Management Department 13. The filing Management 
Department 13 gathers the image data of two or more kinds of resolution in one file, adds 
MAC created from the data of resolution with which the above was specified further to the 
image data concerned, and saves by control of the storage control section 15 at a storage 17. 
[0068] Drawing 16 is drawing for explaining the image data file of this operation gestalt. 
As shown in drawing 16 , the conversion to a low resolution from high resolution is 
specified beforehand. MAC is created from the data of the resolution which guarantees the 
alteration prevention directed in the MAC creation resolution directions section 302, and it 
records on the header or another MAC management file of image data. 

[0069] On the other hand, in alteration test equipment 113, MAC and image data are read 
from a storage 17 by control of the storage control section 18, and it sends to the filing 
Management Department 19. At the filing Management Department 9, MAC is sent to the 
decryption section 21 and image data is sent to an image memory 303. In the decryption 
section 21, MD1 is created by decrypting MAC using a public key. Moreover, after the 
image data memorized in the image memory 303 is reduced by the contraction approach 
predetermined in the image contraction section 304, it is sent to MD creation section 22, 
and MD2 is created using predetermined functions, such as a Hash Function. In the 
coincidence comparator 23, it judges whether image data was altered by comparing MD1 
with MD2. 

[0070] With reference to drawing 15 , the 9th operation gestalt of this invention is 
explained below. The 9th operation gestalt holds the image of multiplex resolution, and the 
image of each resolution has the intention of preventing the alteration of the graphics 
format in which the small block of fixed size is stored as a unit. The reason for storing the 
small block as a unit in this graphics format is because some images can be referred to at a 
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high speed. 

[0071] Although the operation of the digital camera 114 of evidence is the same as an 
operation of the above-mentioned digital camera 112 of evidence, while having image 
contraction / division section 305 and creating the image of two or more resolution here, as 
shown in drawing 17 , with this operation gestalt, an image is divided per Brock of fixed 
magnitude. At the filing Management Department 13, MAC is created for every smallness 
Brock and MAC is written in the header for every small block. The image file with MAC is 
memorized by the storage 17 as an original image by control of the record-medium control 
section 15. 

[0072] The user whose whole photographic coverage and resolution of an image are 
unnecessary creates logging of a required part and the image of required resolution from 
the original image read from the storage 17 within common PC 115 using the edit software 
306 at the time of photography. A user inputs into the image editorial department 306 by 
making the location of a required image part, size, resolution, etc. into the edit parameter 
307. At the filing Management Department 13, the corresponding image block of a location 
is extracted from the corresponding image of resolution, and it saves at another image file. 
[0073] When inspecting an alteration with alteration detection equipment 116, an edited 
image is read from a storage 17 to the filing Management Department 19 by control of the 
storage control section 18. In the alteration detection section 308, alteration detection is 
performed to an edited image. If MAC added for every small block from the first is added to 
a file new as it is at this time, even if it will not prepare an alteration prevention image 
server, a user can perform an editing task called modification of field logging of an image 
or resolution, giving proof nature to an image. Moreover, if it adds the data which recorded 
the procedure of filtering, without changing the pixel value itself in performing filtering, 
such as contrast stretching and smoothing, the guarantee of an original image will be 
attained also about a filtering image. 

[0074] In addition, invention of the following configurations is included in the 
above-mentioned concrete operation gestalt. 

1. Image Pick-up Section for being Digital of-Evidence Camera System Which Detects 
Alteration of Image Data Which Picturized Photographic Subject with Camera and was 
Obtained, and Picturizing Photographic Subject, The cipher-processing section which 
creates the data for alteration detection from the image data obtained by the image pick-up 
using the encryption key built in beforehand, the camera to provide and the alteration 
detection section which detects whether said data for alteration detection were decrypted 
using the decryption key corresponding to said encryption key, and said image data was 
altered based on the result of this decryption - since the digital of-evidence camera 
system characterized by becoming. 

(The operation effectiveness) According to this invention, it can check whether image data 
is altered by creating the data for alteration detection using the encryption key in a camera 
from image data, and decrypting this data for alteration detection using the decryption key 
corresponding to said encryption key. The weight of the evidence of the digital image it was 
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presupposed that it was inferior of a digital image by this compared with the image 
conventionally photoed using the film can be heightened. 

[0075] Moreover, by this invention, although the encryption key for creating the data for 
alteration detection is not revealed outside by any means including a camera user, since 
the encryption key for creating the data for alteration detection is beforehand stored in the 
camera, it can manage an encryption key on very [ in hard ] high security level. 

2. Said cipher-processing section is the digital of-evidence camera system of the 
configuration 1 publication characterized by creating said data for alteration detection by 
enciphering the data obtained by said image data with the application of the 
predetermined function using said encryption key. 

(The operation effectiveness) At least, for change, extent of the alteration to image data is a 
predetermined function (for example, Hash Function) so that it may appear greatly. Since 
the data for alteration detection were created by enciphering to the data applied and 
obtained, the data for alteration detection which can ensure alteration detection can be 
offered. 

3. Said alteration detection section is the digital of-evidence camera system of the 
configuration 2 publication characterized by detecting whether said image data was 
altered by comparing the data obtained by said image data with the application of said 
predetermined function with the data which decrypted said data for alteration detection 
using said decode key, and were obtained. 

(The operation effectiveness) Since said data for alteration detection are used, alteration 
detection can be ensured. 

4. Said cipher-processing section is the digital of-evidence camera system of the 
configuration 1 publication characterized by creating said data for alteration detection 
based on said encryption key and the data for personal authentication. 

(The operation effectiveness) Not only the existence of an alteration of an image but an 
image photography person can specify by adding the information for personal 
authentication at the time of the data origination for alteration detection of image data. 

5. Said cipher-processing section is the digital of-evidence camera system of the 
configuration 4 publication characterized by creating the 1st data for alteration detection 
using said encryption key, creating the 2nd data for alteration detection using said data for 
personal authentication, setting said 1st and 2nd data for alteration detection from said 
image data, and considering as said data for alteration detection from said image data. 
(The operation effectiveness) Since it uses as data for alteration detection in accordance 
with the 1st data for alteration detection created from image data, and the 2nd data for 
alteration detection created from a photography person's data for personal authentication 
It is possible to apply said 2nd data for alteration detection like the electronic signature 
used with other information systems, such as an electronic mail and electronic commerce. 
An infrastructure- [ an electronic authentication office, electronic commerce, etc. ] 
information system and the digital of-evidence camera system which was able to take 
•cooperation can also be built. 
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6. Digital of-evidence camera system of configuration 4 publication characterized by having 
had the storage section which memorizes said data for personal authentication, and said 
encryption key, and the 2nd cipher-processing section which creates the 2nd data for 
alteration detection from said data for personal authentication, and constituting said this 
2nd cipher-processing section free [ attachment and detachment ] to said camera. 

( the operation effectiveness ) they be the media ( IC card etc. ) which can be detach and 
attach freely to a camera about the 2nd cipher processing section which memorize the data 
for personal authentication , and an encryption key , and create the 2nd data for alteration 
detection . by having prepare , even when carrying this medium and the camera of others 
who do not use usually be use , the existence of an alteration of the image which the 
individual attested and photoed certainly can be check . 

7. Said cipher-processing section is the digital of-evidence camera system of the 
configuration 4 publication characterized by creating said data for alteration detection 
using said encryption key from the data with which said image data and said data for 
personal authentication were aligned. 

(The operation effectiveness) In the case of the approach of creating the data for alteration 
detection using said encryption key, as information for a photography person's personal 
authentication, the alteration of image data and the alteration of a photography person's 
data for personal authentication are detectable with one alteration detection data from the 
data with which image data and the data for personal authentication were aligned. If a 
photography person's data for personal authentication are not altered, a photography 
person can be specified from the data for personal authentication. 

8. Image Pick up Section for being Digital of-Evidence Camera System Which Detects 
Alteration of Image Data Which Picturized Photographic Subject with Camera and was 
Obtained, and Picturizing Photographic Subject, The cipher-processing section which 
creates the data for alteration detection from the image data obtained by the image pick-up 
using the encryption key built in beforehand, The camera to provide and the alteration 
detection section which detects whether said data for alteration detection were decrypted 
using the decryption key corresponding to said encryption key, and said image data was 
altered based on the result of this decryption, since — the alteration supervision mode as 
which, as for said camera, said image data detects whether it was altered or not - in 
addition, with the secure mode in which encryption to the image data transmitted to said 
alteration detection section from said camera is performed It has the digital-watermarking 
mode which embeds digital-watermarking data at image data, and the normal mode which 
performs the usual photography without using a security function. The digital of-evidence 
camera system characterized by having the mode selection section for choosing the mode of 
at least one request from these modes. 

(The operation effectiveness) By equipping a camera with the optional feature in various 
modes, the function of the request according to the purpose of using a camera can be set up. 
For example, when photographing a snap image, taking a photograph by normal mode and 
photoing the thing used as an image of evidence, copyright can be kept by taking a 



18/22 



Japanese Publication number : 11-308564 A 



photograph in digital-watermarking mode to alteration supervision mode and the image 
which wants to keep copyright. Furthermore, preservation and transmission of data can be 
carried out to insurance by choosing secure mode to photo the high image of confidentiality 
and transmit an image file to insurance. Moreover, it becomes possible by combining two or 
more modes to use one camera for various applications from the above-mentioned 
effectiveness. 

9. Decryption Key Storage Section Memorized in accordance with 1st Decryption Key 
corresponding to 1st Encryption Key Generated by Equipment corresponding to Identifier 
of Proper, and this Identifier, The decryption key output section which creates the data for 
alteration detection about said 1st decryption key using the 2nd encryption key, and is 
outputted in accordance with this data for alteration detection, and said 1st decryption key, 
A preparation ********** server and the decryption key storage section which memorizes 
said 1st decryption key acquired from said decryption key server through means of 
communications etc., Said data for alteration detection supplied from said decryption key 
server through means of communications etc. are decrypted using the 2nd decryption key 
corresponding to said 2nd encryption key. the decryption key acquisition section equipped 
with the alteration detection section which detects whether said 1st decryption key was 
altered based on the result of this decryption - since -- decryption key acquisition - 
characterized by becoming Registration system. 

(The operation effectiveness) According to this invention, the decryption key of the data for 
alteration detection is acquirable by sending the serial number of equipment to a 
decryption key server. When it follows, for example, a decryption key server can be used 
from the Internet, the data for alteration detection can be acquired even from where 
among the world based on the serial number of a camera. 

10. With Filing Management Department Which is Digital Image Edit System into which 
Image Data is Edited, and Does Filing Management of the Image Data Inputted through 
Image Input Section while Detecting Alteration of Image Data While decrypting the 1st 
data for alteration detection beforehand given to said image data using the decryption key 
corresponding to the encryption key used when creating this data for alteration detection 
The alteration detection section which detects the alteration condition of image data by 
comparing this the 1st decoded data for alteration detection and said image data, To said 
image data from the edited image data to which various image processings were performed 
by the image editorial department which performs various kinds of image processings, and 
said image editorial department, and the data of the edit hysteresis by said image editorial 
department the renewal section of an image file which creates the 2nd data for alteration 
detection using an encryption key other than said encryption key, and adds this to said 
edited image data " since " the digital image edit system characterized by becoming. 
(The operation effectiveness) According to this invention, since the data for alteration 
detection are created in accordance with image data and edit hysteresis, it can check what 
kind of edit processing has been performed to the original image, and can detect further 
whether image edit processing is performed except the system concerned. 
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11. Said renewal section of an image file is the digital image edit system of the 
configuration 10 publication characterized by using said another encryption key for said 
personal authentication information, and creating said 2nd data for alteration detection 
while being able to detach and attach freely to a digital image edit system and memorizing 
said personal authentication information and said another encryption key. 

(The operation effectiveness) An image server can be built by low cost with constituting 
other functions, such as edit of an image and creation of edit historical data, from a storage 
in which attachment and detachment like an IC card of management of an encryption key 
and processing of encryption are free by software. 

12. The digital image edit system of the configuration 9 publication characterized by 
uniting and recording personal authentication information on said edit hysteresis. 

(The operation effectiveness) The person who edited the image can be specified by 
including the information for personal authentication in image data also including the 
data of image edit hysteresis. 

13. Said image input section is the digital image edit system of the configuration 9 
publication characterized by inputting the image data memorized by external storage by 
connecting with said image filing section through direct continuation (a cable, IrDA) or a 
communication line. 

(The operation effectiveness) An image file can be easily inputted from an external device 
by equipping the image filing section of an image server with the terminal of direct 
continuation, such as a serial cable, and SCSI, IrDA, and the terminal of network 
connections, such as Ethernet. 

14. It is a digital of-evidence camera system the configuration 1 characterized by for said 
image data be multiplex resolution image data which made the group two or more image 
data different mutually [ resolution ] , and memorized it , and said cipher-processing 
section have the selection section which chooses at least one image data which has desired 
resolution out of said multiplex resolution image data in order to create said data for 
alteration detection , or given in ten . 

(The operation effectiveness) By specifying the resolution which guarantees alteration 
detection at the time of record, the user using an image becomes possible [ using a desired 
resolution image without being dependent on the resolution at the time of photography ]. 

15. it be a digital of evidence camera system the configuration 1 which said image data be a 
multiplex resolution image data which made the group two or more image data different 
mutually [ resolution ] , and memorized them , and each image data in said multiplex 
resolution image data be memorize considering the predetermined small block as a unit , 
and said cipher processing section be said small block unit , and be characterize by create 
said data for alteration detection , or given in ten . 

(The operation effectiveness) Alteration detection can be carried out also to the image 
which performed image edit like a clipping, without preparing the server of dedication by 
adding alteration detection data for every small block. 
[0076] 
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[Effect of the Invention] According to this invention, the weight of the evidence of a digital 
image can be heightened, the digital of-evidence camera system and decryption key 
acquisition / registration system which can manage an encryption key on very high 
security level can be offered, and even if it edits further compression which is needed on 
the property of an image, field logging, insertion of a caption, etc., the digital image edit 
system which can maintain the weight of the evidence of a digital image can be offered. 
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[Brief Description of the Drawings] 

[Drawing l] It is drawing showing the digital of-evidence camera structure of a system 
concerning the 1st operation gestalt of this invention. 

[Drawing 2] It is drawing showing a procedure until MAC is added to image data. 
[Drawing 3] It is drawing showing the configuration of the digital camera of evidence 
concerning the 2nd operation gestalt of this invention. 

[Drawing 4] It is drawing showing the digital of-evidence camera structure of a system 
concerning the 3rd operation gestalt of this invention. 

[Drawing 5] It is drawing showing a procedure until the data for personal authentication 
and MAC are added to image data. 

[Drawing 6] It is drawing showing the digital of-evidence camera structure of a system 
concerning the 4th operation gestalt of this invention. 

[Drawing 7] It is drawing showing a procedure until MAC 1 and MAC2 are added to image 
data. 

[Drawing 8] It is drawing showing the image server structure of a system concerning the 
5th operation gestalt of this invention. 

[Drawing 9] It is a flow chart for explaining an operation of the 5th operation gestalt. 
[Drawing 10] It is drawing showing the image server structure of a system concerning the 
6th operation gestalt of this invention. 

[Drawing ll] It is drawing showing the example of the image server structure of a system 
of the 5th operation gestalt. 

[Drawing 12] It is drawing showing the example of the image server structure of a system 
of the 6th operation gestalt. 

[Drawing 13] It is drawing showing decryption key acquisition / registration structure of a 
system concerning the 7th operation gestalt of this invention. 

[Drawing 14] It is drawing showing the digital of-evidence camera structure of a system 
concerning the 8th operation gestalt of this invention. 

[Drawing 15] It is drawing showing the digital of-evidence camera structure of a system 
concerning the 9th operation gestalt of this invention. 

[Drawing 16] It is drawing for explaining the image data file concerning the 8th operation 
gestalt. 

[Drawing 17] It is drawing for explaining the image data file concerning the 9th operation 
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gestalt. 

[Description of Notations] 

1 Image pick-up lens, 

2 •■ Image sensor, 

3 " Amplifier, 

4 - A/D -conversion section, 

5 - Signal-processing section, 

6 - Image memory 

7 Image display section, 

8 - File-format-conversion section, 

9 MD creation section, 

10 -- Private key memory, 

11 - MAC creation section, 

12 Header Records Department, 

13 -- Filing Management Department, 

14 -- Communications control section, 

15 -- Storage control section, 

16 -- Communication line, 

17 " Storage, 

18 - Storage control section, 

19 " Filing Management Department, 

20 - Public key memory, 

21 -- Decryption section, 

22 -- MD creation section, 

23 - Comparison coincidence section, 

24 - Communications control section, 

25 -- Communication line, 
50-1 -- Camera section, 

60 - Image pick-up means, 

100 " Digital camera of evidence, 

101 -- Alteration test equipment. 
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